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Abstract 

We give labeled natural deduction systems for a family of tense logics extending the basic linear tense logic Kl. We prove 
that our systems are sound and complete with respect to the usual Kripke semantics, and that they possess a number of useful 
normalization properties (in particular, derivations reduce to a normal form that enjoys a subformula property). We also 
discuss how to extend our systems to capture richer logics like (fragments of) LTL. 



1 Introduction 

Hilbert-style systems, although uniform, are difficult to use in practice, especially in comparison with the more "natural" 
Gentzen-style systems such as natural deduction (ND), sequent, and tableaux systems. However, devising Gentzen-style sys- 
tems for modal, relevance, and other non-classical logics often requires considerable ingenuity, as well as trading uniformity 
for simplicity and usability. A solution to this problem is to employ labeling techniques, which provide a general framework 
for presenting different logics in a uniform way in terms of Gentzen-style systems. 

The intuition is that labeling (also called prefixing, annotating or subscripting) allows one to explicitly encode additional 
information, of a semantic or proof-theoretical nature, that is otherwise implicit in the logic one wants to capture. So, for 
instance, instead of a modal formula A, we can consider the labeled formula (Iwff) x : A, which intuitively means that A 
holds at the world denoted by x within the underlying Kripke semantics. We can also use labels to specify how worlds are 
related in a particular Kripke model, e.g. the relational formula (rwff) x < y states that the world y is accessible from x. 

Labeled deduction systems have been given for several non-classical logics, e.g. lfTl[^l^l7l[8l fTTlfl^[T^[l^[T9ll . and 
research has focused not only on the design of systems for specific logics, but also, more generally, on the characterization 
of the classes of logics that can be formalized this way. General properties and limitations of labeling techniques have also 
been investigated. For example, lfl9ll highlights an important trade-off between limitations and properties, which can be 
roughly summarized as follows. Assume that we have a set of rules for reasoning about the introduction and elimination of 
modal operators in lwffs x : A such as the following rules for □, where we express x : DA as the metalevel implication 
x < y y : A for an arbitrary y accessible from x (y is fresh, i.e. it is different from x and does not occur in any 
assumption on which y : A depends other than x < y): 

[x < y] 

y : A _ x : DA x < y 

Dl (y fresh) DE . 



x : DA y : A 

Assume also that we reason on the semantic information provided by labeling using Horn-style relational rules 

xi < yi ... x„ < Un 



xo < yo 

where the a;, and yi are labels, and n > (so that the rule has no premises when n = 0). While restricting our systems to 
such Horn rules allows us to present only a subset of all possible non-classical logics, we can still capture several of the most 



common modal and relevance logics, and, more importantly, labeling provides an efficient general method for establishing 
the metatheoretical properties of these logics, including their completeness, decidability, and computational complexity. This 
method relies on the separation between the sub-system for reasoning about lwffs and the sub-system for reasoning about 
rwffs: derivations of lwffs can depend on derivations of rwffs (e.g. via the □ rules), but rwffs depend only on rwffs (via the 
Horn rules). 

In this paper, we give labeled natural deduction systems for a family of tense logics extending the basic linear tense logic 
Kl lfT31l . Our starting point is |fl9l but it should be immediately clear that Horn rules do not suffice: even a minimal tense 
logic like Kl requires its time points to be connected, i.e. for any two points x and y either x = y, or x is before y, or y 
is before x. It is straightforward to see that such a property cannot be captured by a Horn rule like the one above; rather, 
we need non-atomic rwffs, in particular disjunction (U) of relations, and more complex rules built using a full first-order 
language, such as the axiom 

conn . 

Wx.y. x<yUx=yUy<x 

A similar situation occurs if we wish to impose irreflexivity of our worlds. And that's not all: as shown in |fl9ll (in the case of 
modal logics, but the same arguments apply here, mutatis mutandis), if we move to such a first-order language and wish to 
retain completeness of the resulting systems, then we need to abandon the strict separation between the sub-system for lwffs 
and that for rwffs (and let derivations of rwffs depend also on lwffs). As we will see in more detail below, this is best achieved 
by introducing a so-called universal falsum, so that a contradiction in a world can be propagated not only to any other world 
but also to the relational structure to derive any rwff; and, vice versa, from a contradiction in the relational sub-system we 
can obtain any lwff. 

The main contributions, and the structure, of this paper are thus the following. In Section|2] we give a brief presentation of 
the syntax and semantics, and of a standard axiomatization, of Kl. In Section[3] we give a labeled natural deduction system 
Af(Kl) for Kl, which we show to be sound and complete (extending the completeness proofs given for modal logics in lfl9l ). 
Then, in Section [4] we show that Af(Kl) possesses a number of useful normalization properties; in particular, derivations 
reduce to a normal form that enjoys a subformula property. In Section [5] we extend Af(Kl) to capture some interesting 
extensions of Kl, and in Section [6] we discuss how to extend our systems to capture richer logics like (fragments of) LTL. 
We conclude, in Section |7J by comparing with related work and discussing future work. Detailed proofs and examples are 
given in an appendix. 

2 The basic linear tense logic Kl 

2.1 Syntax 

Definition 1 Given a set V of propositional variables, the set of well-formed Kl formulas is defined by the following 
Backus-Naur-form presentation, where p 6 V: 

A ::= p \±\ A D A \ GA \ HA. 

Truth of a tense formula is relative to a world in a model, so, intuitively, GA holds at a world iff A always holds in the future, 
and HA holds at a world iff A always holds in the past. We will formalize this standard semantics below, but in order to 
give a labeled ND system for Kl, we extend the syntax with labels and relational symbols that capture the worlds and the 
accessibility relation between them. 

Definition 2 Let L be a set of labels and let x and y be labels in L. If A is a well-formed Kl formula, then x : A is a labeled 
well-formed formula (labeled formula or lwff, for short). 

The set of well-formed relational formulas ( relational formulas or rwffs, for short) is defined as follows: 

p ::= x<y\x = y\ $\ pZ\p\ Vx. p . 

We write <p to denote a generic formula (lwff or rwff). We say that an lwff x : A is atomic when A is atomic, i.e. A is a 
propositional variable or A is _L. An rwff p is atomic when it does not contain any connective or quantifiers, i.e. p is or p 
has the form x < y or x = y. The grade of an lwff or rwff is the number of occurrences of connectives (D or □), operators 
(G or H), and quantifiers (V). Finally, given a set of lwffs T and a set of rwffs A, we call the ordered pair (T, A) a proof 
context. 

The given syntax uses a minimal set of connectives, operators, and quantifiers. As usual, we can introduce abbreviations 
and use, e.g., ~, A, V and -i, U, for the negation, the conjunction, and the disjunction in the labeled language and in the 
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relational one, respectively. For instance, ~ A = A DJL and p' U p" = (p' □ 0) □ p". We can also define T = ^_L, other 
quantifiers, e.g. 3x. p = ~Nx. ~^p, and other temporal operators, e.g. PA = ~ G ~ A to express that A holds sometime in 
the future. 



2.2 Semantics 



Definition 3 A Kl frame is a pair (W, -<), where W is a non-empty set of worlds and -< C W x W is a binary relation that 
satisfies the properties of irreflexivity, transitivity and connectedness, i.e. for all (x, y) S W 2 we have x = y or (x, y) G-< or 
{y,x) G-<. 

A .K7 model is a triple (>V, -<, V), where (W, -<) is a Kl frame and the valuation V is a function that maps an element of 
W and a propositional variable to a truth value (0 or 1). 

In order to give a semantics for our labeled system, we need to define explicitly an interpretation of labels as worlds. 

Definition 4 Given a set of labels L and a model M. = (W, -<, V), an interpretation is a function A : L — > W that maps 
every label in L to a world in W. 

Given a model A4 and an interpretation X on it, truth for an rwffor Iwffip is the smallest relation \= M ' X satisfying: 

^ M ' x x<y iff (\(x),X(y)) e< 

\= M >* x = y iff \{x) = \{y); 

\= M > X pi □ p 2 iff \= M ' X Pi implies \= M ' X p 2 ; 

\= M ' X \/x.p iff forally,^ M - x p[y/x]; 

\= M ' X x:p iff V(\(x),p) = l; 

^ M ' x x : AD B iff \= M ' X x : A implies ^ M ' X x : B; 

\= M < X x :GA iff for all y, \= M ' X x<y implies \= M ' X y ■ A; 

^ M ' x x : HA iff for all y, ^ M ' X y < x implies \= M > X y : A. 

Hence, ¥ M - X x : _L and ¥ M - X 0. When \= M - X tp t we say that <p is true in M according to the interpretation A. By 
extension: 





r 


iff 


L--M,>. 




A 


iff 






(r,A) 


W 


L-M,X 


r, a |= 




iff 





ilj implies |='""" ip. 

Truth for lwffs and rwffs built using other connectives or operators can be defined in the usual mannerQ 



2.3 An axiomatization of Kl 



Several different Hilbert-style axiomatizations have been given for the logic Kl; the following one is taken from |fT31 : 

(Gl) G(A D B) D (GA D GB) 
(G2) ~ H ~ GA 3 A 
(G3) GA D GGA 

(G4) [G(A V B) A G(AVGB) A G(GA V B)\ D (GA V GB) 

(Nec G ) If h A then h GA 

{Nec H ) If h A then h HA 

(MP) If h A and h A D B then h B 

The axiom (Gl) is standard for modal and temporal logics, while (G2) sets the dual relation between G and H, (G3) 
expresses the transitivity and (G4) the connectedness of G. For brevity, we have omitted the symmetric axioms (H1)-(H4) 
that are obtained by replacing every G by H and vice versa. Moreover, every classical tautology is a tautology, and there are 
rules for modus ponens and necessitation for both G and H. 

'Note that truth for lwffs is related to the standard truth relation for modal logics by observing that ff= M x : A iff A. 
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[x : A D±] 



x : A 



RAA, 



A] 
B 



[P=10] 



AD B 
[Pi] 



, x : A D B x : A „ 
Dl 5 3-E 



[x < y] 

y ■ A 

x : QA 



x : QA x < y y 
GI* GE 



[y < x] 

A 



y ■ A 



x : HA 



x : HA y < x 
HI* j HE 

y ■ A 



RAAa 



j Pi □ PI Pi P v/ , VX - P y E 

Pi □ P2 Pi Vx.p p\yl'A Vx.x = x 



Pi 



refl-- 



\/x. —i(x < x) 



irrefl < 







Vx.y.z. (x < y n y < z) □ x < 2 



trans < conn — — — mon ufl uj2 

\lx.y. x<yUx = yUy<x ip[y/x] x :_L 



*In G/ (respectively, H/), j/ is different from x and does not occur in any assumption on which y : A depends other than the discarded assumption x < y 
(respectively, y < x). 

In W, the variable x must not occur in any open assumption on which p depends. 



Figure 1 . The rules of Af(Kl) 



3 A labeled natural deduction system for Kl 



Our labeled ND system Af(Kl) = M(KIl) +AT(KIr) +J\[(KIq) comprises of three sub-systems, whose rules are given 
in Figure Q] 

The propositional and temporal rules of ]\[(KIl) allow us to derive lwffs from other lwffs with the help of rwffs. The 
rules Dl and DE are just the labeled version of the standard ( lfT4l[T7ll ) ND rules for implication introduction and elimination, 
where the notion of discharged/open assumption is also standard (e.g. the formula [x : A) is discharged in the rule Dl). The 
rule RAA± is a labeled version of reductio ad absurdum, where we do not enforce Prawitz's side condition that A / ±0 
The temporal operators G and H share the structure of the basic introduction/elimination rules, with respect to the same 
accessibility relation <; this holds because, for instance, we express x : GA as the metalevel implication x < y => y : A 
for an arbitrary y accessible from x (as we did for □ in the introduction). 

The relational rules of Af(Kln) allow us to derive rwffs from other rwffs only. The rules RAAq, □ /, and □ E are 
reductio ad absurdum and implication introduction and elimination for rwffs, while V/ and \/E are the standard rules for 
universal quantification, with the usual proviso for VI. There are also four axiomatic rules (or "axioms", for short) refl =, 
irrefl <, trans <, and conn, which express the properties of =0 and <, where, for readability, we employed the symbols for 
disjunction, conjunction, and negation. 

The general rules of M(KIq) allow us to derive lwffs from rwffs and vice versa. The rule mon applies monotonicity to an 
lwff or rwff ip, while the rules ufl and u/2 export falsum (and we thus call it a universal falsum) from the labeled sub-system 
to the relational one, and vice versaQ 

Definition 5 (Derivations and proofs) A derivation of a formula (lwff or rwff) ip from a proof context (T, A) in Af(Kl) is a 
tree formed using the rules in J\f{Kl), ending with (p and depending only on a finite subset ofT U A. We then write T, A h (p. 
A derivation of tp in J\f{Kl) depending on the empty set, h <p, is a proof of <p in ff(Kl) and we then say that ip is a theorem 
ofM(Kl). 



2 See 1191 for a detailed discussion on RAA±, which in particular explains how, in order to maintain the duality of modal operators like □ and (), the 
rule must allow one to derive x : A from a contradiction _L at a possibly different world y, and thereby discharge the assumption x : A D_L. 

3 Note that we do not need further axioms to express symmetry and transitivity of =, since the former can be derived by using mon, conn, and irrefl <, 
and the latter by using mon. 

4 Note that the presentation of the system could be simplified by introducing a unique symbol for falsum (say A), shared by the labeled and the relational 
sub-systems. In that case, we would not need the rules ufl and u/2, while the rules for falsum elimination RAA± and RAAq could be replaced by the 
following rule, where with —ipwe denote the negation of a generic formula (labeled or relational): 

["¥>] 

£ RAA - 

However, we prefer to maintain a clear separation between the two sub-systems, as it will allow us to give a simpler presentation of normalization. 
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[y ■ A][x < y] 



[y.A][y<x] 



V ■ A x < y x:FA z: B V ■ A. y < x x : PA z: B 

i^~a Fi rE ri ~ PE 

x : FA z : B x : PA z : B 

[ P} ] m [p[y/x]] 



p lU p 2 piUpa u " p ^ 3x.p - p> 

*In FE (respectively, P-E), y is different from x and 2, and does not occur in any assumption on which the upper occurrence of 2 : B depends other than 
y : A or x < y (respectively, y < x). 

In 3E, y does not occur in any assumption on which the upper occurrence of p' depends other than p[y/x]. 

Figure 2. Some derived rules 



«2 



\x<y} 1 

TT " x:± DA A V X ~ V ""3 "1 ®=V V = z 

x<z HAA ± x .j_ man " mon 

y.A 7T 2 ~+ . . , V- 1 - ~^~ ufl V[v/x] V = Z V 

. GI 1 ir[z/y] ufl n mon 



- QE z:A 



z:A 

(a) Reduction for the detour Gl/GE (b) A reduction for falsum-rules (c) Reduction for the rule mon 



Figure 3. Examples of reductions 



We will give concrete examples of derivations in the following sections. For simplicity, we will employ the rules for 
conjunction A and disjunction V, which are derived from the basic propositional rules as is standard, as well as other derived 
rules such as those for F, P, U, and 3 given in Figure [2] 

Since the axiomatization of Kl given in Section [2731 is sound and complete, we could prove in Af(Kl) the axioms and 
the rules of the axiomatization to establish the completeness of M(Kl) indirectly (and we do so in Section |A. 2. 2b . We can, 
however, also give a direct proof of the soundness and completeness of N(Kl). In fact, by adapting standard proofs for 
labeled systems (see, e.g., JU EH [19) and the detailed proofs in the appendix, which in particular extend those for modal 
logics in |fl9l to the case of universal falsum and other general rules that mix derivations of lwffs and rwffs), we have: 

Theorem 6 (Soundness and completeness of Af(K I)) Af(Kl) — M{Kl L ) + N{KIr) + Af(Klc) is sound and complete, 
i.e. we have that r, A h ip iff T, A ipfor every model M. and every interpretation A. 

4 Normalization 

4.1 Derivations in normal form 

We will now show that the system JV(Kl) possesses a number of useful normalization properties. To that end, we will 
follow the classical normalization process of [14] as much as possible, while some adaptations are inspired by [ 19 1. We begin 
by simplifying the proofs by restricting the applications of some of the rules. 

Lemma 7 IfT, A h ip, then there exists a derivation of <p from (T, A) where: (i) the conclusions of applications of RAA±, 
RAAq, and mon are atomic; (ii) mon is not applied to lwffs of the form x :_L. 

The system obtained from J\f(Kl) by restricting the rules RAA±, RAA$, and mon according to this lemma is equivalent to 
Af(Kl). From now on, we will thus consider only this restricted system and keep calling it Af(Kl). 

The ND systems given in [19] for families of modal and relevance logics are based on a strict separation between the 
labeled and the relational sub-systems (i.e. derivations of lwffs can depend on derivations of rwffs, but not vice versa). This 
separation is possible thanks to the restriction to relational theories that are Horn theories. Our system Af(Kl) does not allow 
for such a separation, since the rules for universal falsum let relational derivations depend also on labeled ones. Thus, more 
complex derivations are possible, which implies that with respect to |19 | we need to consider more forms of detours and 
hence more forms of reductions. 
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Definition 8 We say that a formula ip is a maximal formula in a derivation when it is both the conclusion of an introduction 
rule and the major premise of an elimination rule. 

We define the notion of label position for labels occurring in a formula ip to which the rule mon is applied. By the 
restrictions of Lemma\7\ tp can have the form (i) x : p, (ii) x < y, or (in) x = y. We say that x has label position 1 in (i), 
(ii) and (iii), and y has label position 2 in (ii) and (in). 

A derivation is in pre-normal form (is a pre-normal derivation) if it has no maximal formulas and in every sequence of 
mon applications, all the applications which concern variables with the same label position occur consecutively. 

The notion of pre-normal derivation embodies the elimination of standard detours (given by a couple of introduction/elimination 
rule applications on the same connective or operator) and an ordering of mon applications that aims at eliminating mon de- 
tours, i.e. two or more applications of mon which concern variables with the same label position. Note that, since mon 
is only applied to atomic formulas of the form described above, once we have eliminated maximal formulas, the case of a 
sequence of mon applications is the only case in which we can have this kind of detour. 

Lemma 9 Every derivation in ff(Kl) reduces to a derivation in pre-normal form. 

Proof (Sketch) First, we iteratively apply proper reductions (an example is in Figure^a)) that remove maximal formulas. 
Then the lemma follows by observing that applications of mon in a sequence can be permuted as shown in Figure[13]in the 
appendix. H 

Definition 10 We call falsum-rules the rules RAA±, RAAq, ufl, and uf2. We say that a formula ip is a redundant formula 
in a derivation when: (i) ip is both the conclusion and the premise of a falsum-rule; or (ii) ip is both the conclusion and the 
major premise of a mon carrying out two substitutions in the same label position ( see Figure\3^c) ). 

A derivation is in normal form (is a normal derivation) iff it is in pre-normal form and does not contain any redundant 
formula. 

Theorem 11 Every derivation in J\f(Kl) reduces to a derivation in normal form. 

Proof (Sketch) By Lemma|9] every derivation reduces to a pre-normal derivation. Then we can apply permutative reduc- 
tions (examples in Figure[3j&) — (c)) that remove redundant formulas. More details are given in the appendix. H 

Normal derivations in Af(Kl) have a well-defined structure that has a number of desirable properties. In particular, there 
is an ordering on the application of the rules, which we can exploit to prove a subformula property for our system. To that 
end, we adapt the standard definitions of subformula and track as follows: 

Definition 12 B is a subformula of A iff (i) A is B; (ii) A is A\ D Ai and B is a subformula of A\ or A^; (Hi) A is QtA\ 
and B is a subformula of A\; or (iv) A is HA\ and B is a subformula of A\. We say that y : B is a subformula of x : A iff 
B is a subformula of A. 

P2 is a subformula of pi iff (i) p\ is pi; (ii) p\ is p[ □ p'{ and pi is a subformula of p' x or p'[; or (Hi) p\ is \fx. p and pi is 
a subformula of p. 

Given a derivation n in Af(Kl), a track in n is a sequence of formulas ipi, . . . , ip n such that: 

(i) ipi is an assumption of n, an axiom, or the conclusion of a universal falsum rule ( ufl or ufl); 

(ii) tfi stands immediately above ipi+i and is the major (or the only) premise of a rule for 1 < i < n; 
(Hi) <p n is the conclusion of n, the premise of a universal falsum rule, or the minor premise of a rule. 

We call a track ipi, . . . , ip n a labeled track when each ipi is an Iwffand a relational track when each ipi is an rwff. 

In other words, a track can only pass through the major premises of rules and it ends at the first minor premise of a rule, or 
at an application of universal falsum, or at the conclusion of it. The following lemmas formalize properties of the structure 
of the tracks and specify the way in which the tracks are linked one to each other. 

Lemma 13 Let it be a normal derivation, and let t be a track ipi, . . . , ip n in n. Then t consists of three (possibly empty) 
parts: (1) an elimination part, (2) a central part, and (3) an introduction part (see Figure where: 

(i) each ifi in the elimination part is the major premise of an elimination rule and contains <Pi+\ as a subformula; 

(ii) each ipj in the introduction part except the last one is the premise of an introduction rule and is a subformula ofipj+i; 
(Hi) each ip^ in the central part is atomic and is the premise of a falsum-rule or the major premise of a mon; 

(iv) the central part contains at most one application of falsum-rules; 

(v) tracks originating from an application of ufl or uf2 have an empty elimination part; 

(vi) tracks ending in an application of ufl or uf2 have an empty introduction part. 
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CASE 1 CASE 2 CASE 3 CASE 4 



Figure 5. Possible connections between labeled tracks // and relational tracks t r 



Lemma 14 Let t\ be a labeled track and t r a relational track in a derivation n. Then ti and t r can be connected in one of 
the following ways (shown in Figure\5}: 

(i) the last formula in t r is the minor premise of a GE or of a HE whose major premise is a formula in the elimination 
part ofti; 

(ii) the last formula in t r is the minor premise of a mon whose major premise is a formula in the central part ofti; 
(Hi) t r ends with an application of uf2 and the conclusion of that application is the first formula in ti; 

(iv) ti ends with an application of ufl and the conclusion of that application is the first formula in t r . 

Proof The statement follows trivially by observing that GE, HE, mon, ufl, and uf2 are the only rules that mix labeled 
and relational formulas and that, by Lemma[T3l such rules can be applied only in a specific part of a track. H 

4.2 The subformula property 

To prove a subformula property for N(Kl), we adapt further standard definitions: 

Definition 15 Given a derivation 7r in J\f(Kl), the main thread is the sequence t±, . . . , t n of tracks such that: (1) the first 
formula in t\ is an assumption or an axiom; (2) ti and ti+i are connected by means of an application of ufl or uf2, for 
1 < i < (n — 1); and (3) the last formula in t n is the conclusion of it. 

Let 7r be a derivation of tp from (T, A) in Af(Kl), Sl be the set of subformulas of the formulas in T (or in T U {(p} if (p 
is a labeled formula), and Sr be the set of subformulas of the formulas in A U Ax (or in A U Ax U {(p} if tp is a relational 
formula), where Ax is the set of axioms used in n. We say that n enjoys the subformula property iff 

1. for all Iwffs y : B used in the derivation n: 

(i) B e S L ; or 

(ii) B is an assumption D D_L discharged by an application of RAA± where D G Sl; or 

( Hi) B is an occurrence of _L obtained by I)E from an assumption D D_L discharged by an application of RAA±, 
where D G Sl; or 

(iv) B is an occurrence of J- obtained by an application of RAA± that does not discharge any assumption; or 

(v) B is an occurrence of _L obtained by an application of uf2; 

2. for all rwffs p used in the derivation n: 

(i) pe S R ; or 

(ii) p is an assumption pi □_!_ discharged by an application of RAA$ where pi G Sr; or 

(Hi) p is an occurrence of 9 obtained by ^E from an assumption p! □ discharged by an application of RAAq, where 
p' G Sr; or 
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(iv) p is an occurrence of 9 obtained by an application of ufl; or 

(v) p is obtained by an application of mon. 

Lemma 16 Every normal derivation in J\f(Kl) satisfies the subformula property. 

Proof This follows immediately from the standard proof f\M . which is based on the introduction of an ordering of the 
tracks in a normal derivation depending on their distance from a main thread. In our case, a main thread contains not only 
labeled formulas and we have to consider more cases than in the standard proof, given that the central part of a track can have 
a more complex structure (as it can also contain applications of ufl, uf2, and mon). H 

This lemma shows that although normal derivations in Af(Kl) have a more complex structure than normal derivations in 
ND systems for classical logic [14] and ND systems for families of modal and relevance logics fl9l , they have still a well- 
defined structure and satisfy a subformula property. It is important to remark that the special cases added to the definition of 
subformula property (i.e. formulas can be derived by applications of ufl, uf2, or mon) do not compromise automatic proof 
search completely, given that such cases can occur only in a limited section of a normal derivation (i.e. the central part of a 
track). 

We also note that the presence of axioms (and in particular the fact that they are expressed in a full first-order language) 
makes our proof of normalization more complex and our results weaker. Thus, it is not possible to use it as a means to show 
the consistency of the system or the validity of an interpolation theorem, as can be done for systems in [19], where relational 
properties are expressed by Horn rules and we have only atomic axioms. 

5 A family of tense logics 

The basic linear tense logic Kl leaves unanswered many fundamental natural questions about the structure of time. How- 
ever, the labeling framework allows us to express several further relational properties in a straightforward and clean way, 
i.e. by only adding the corresponding relational axioms to the relational sub-system. In particular, we will now show how to 
extend Af(Kl) to capture the extensions of Kl with: a first/final point; unbounded time; dense time; and discrete time (where 
we adopted the classification of 0~5 1)0 

Kl with a first/final point The semantics of Kl is given by means of temporal structures where nothingis said about the 
existence of a first or a final point. To express the existence of such points, we can add the following axiomsjto the relational 
sub-systems: 

first final . 

Bx. Vy. ->(y < x) 3x. Vj/. —<(x < y) 

The two axioms do not affect each other; thus we can decide to add both or just one of them to the system, according to the 
logic we want to represent. 

Soundness of the extended systems is straightforward, since the axioms mirror the properties that the models of the 
extended logic are required to satisfy. To show completeness, it suffices to extend the canonical model construction presented 
for Af(Kl) (see Section lA2b to consider also the new relational axioms. Alternatively, we can simply prove completeness 
by proving the corresponding (see, e.g., |18|) Hilbert-style axioms (having a first point) and (having a final point) that are 
given in Figure [6] In Figure [7] we show the derivation for the first one (the proofs of the two axioms are symmetric). Also 
the normalization procedure of Section|4]can still be applied to the extended system: we have just to consider the possibility 
of more relational axioms. 

Kl with unbounded time Conversely, we can express the fact that the sequence of time points is unbounded, towards the 
past and/or towards the future. This corresponds to adding the conditions of seriality on the left and/or on the right, i.e. every 
point has a predecessor and/or a successor. For this, we can add two relational axioms corresponding to the axioms for left 
and right seriality given in Figure|6l 

Iser rser . 

\fx.3y. y < x \/x.3y. x < y 

5 It is worth to mention that in |6], Bonnette and Gore give a labeled sequent system for the minimal tense logic Kt that can easily capture any combination 
of the reflexive, transitive, euclidean, symmetric and serial extensions of the logic. We have not considered all of these properties of the accessibility relation 
here, but the missing ones can be added straightforwardly thanks to the modularity of our system, which we exploit to capture the extensions towards LTL 
we consider in the remainder of the paper. The labeling discipline of 1 6 1 is different from ours and is tailored to a lean Prolog implementation of their sequent 
systems. In contrast, we focus here on the proof-theoretical aspects of our ND systems and leave an implementation for future work. 

6 The existence of a first (or a final) point is often expressed by adding a constant to the language. For example, we could introduce a constant for the 
first point and an axiom stating that Vy. —i(y < 0). We prefer not to modify the language and keep the treatment of this property closer to that of other ones. 



8 



(having a first point) H 1 V PH 1 (left-density) PAdPPA 

(having a final point) Gl V FG _L (right-density) FA D FFA 

(left-seriality) PT (left-discreteness) (PT AAA GA) D (PGA) 

(right-seriality) FT (right-discreteness) (FT AAA HA) D (FHA) 



Figure 6. Some axioms for extensions of Kl 



■ first 



Vx.y. x<yUx=yUy<x l^y- ^ (2/<s)J tt-i ir 2 

VE o o 

Vy. t<yUt=yUt<x -.(t<s) [*<*] N»Us<(] J 

VB ; 'B 

KsU(=sUs<i 

UB 3 



3x.Vy. -t(y<m) 

3B 2 





u/2 

BAAjT 



where tti is: and 7T2 is: 

[W. ^(a<s)] 2 [v- y . ^(i;< s )] 2 

i VB . V-B 

[t:PTAHPT] -(9<a) [<7<s] J [trPTAHPT] 1 ->(r<s) [r<s] 6 

t-E AE . <E 



-(«:PT) - [t= 3 ] 4 " i:HPT [ S <t] 4 
mon uj 1 u j2 



(s:PT) s:X S:PT 



u/1 ■ u/1 



Figure 7. Derivation of the modal axiom for first point 



As an example, we show completeness for f right-seriality), where 7r is some proof of s : T based on a proof of T or AV ~ A 
in classical logic (see, e.g., |[T4l[T7lD : 



Wx.3y. x < y s : T [t < s] 1 

■ VB FI 



3y.t<y t: FT 

— 3E 1 

t : FT 

Kl with dense time Another constraint that we can impose on relational structures is that the flow of time is dense, i.e. be- 
tween any two points we can find a third point: 

— = — dens . 

vx.y. x < y □ dz. x < z n z < y 

Figure [TT] in the appendix shows the proof of the axiom for (right-density); the proof for (left-density) can be obtained in a 
symmetric way by using the same axiom (dens). 

Kl with discrete time Finally, we can express discreteness both towards the past and towards the future: 

Vx.y. x < y □ 3z. z < y n -3u. (z < u n u < y) 

rdiscr . 



Vx.j/. x < y □ 3z. x < z n (x < u n m < z) 
We omit the proof of completeness for the corresponding axioms. 

6 Towards LTL 

We have seen that ND systems for several extensions of Kl can be given by extending the "base system" N(Kl). This is 
not the case for all the possible extensions, however, as some properties, e.g. continuity or finite intervals, are second-order 
properties lfl8l and thus require an appropriate higher-order relational language. We now briefly discuss whether (and how) 
it is possible to extend Af(Kl) to capture a richer logic like (fragments of) LTL. 
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MTL: a subset of LTL For brevity, we restrict our attention to future temporal operators only (but the extension to the 
past is straightforward) and begin by considering the system Af(Kl) extended with the axioms rdiscr and rser so that the 
flow of time is discrete and unbounded towards the future (in this case, the presence of rser allows us to simplify rdiscr 
to Vx. 3z. x < z l~l -<3u. (x < u\l u < z)). We can express in our syntax the relation next in terms of the relation < (see, 
e.g., iflOlD , i.e. we can introduce a relational symbol < (with the meaning of immediately precedes) as an abbreviation: 

s < t = s < t n Vx. ->(s < x) U ->(x < t) . 

This allows us to enrich the language with an operator X, whose semantics can be given without having to introduce a specific 
relation for it in the definition of a model. We just need to require that models for this logic are Kl models where < is also 
discrete and serial on the right, and extend the definition of truth with: 

\= M ' x x:XA m ^ M ' x x<ly and \= M > x y:A. 

Rules for introduction and elimination of X can now be given in a clean way, with the usual freshness proviso for X/0 

[x<y] 

y : A x : XA x <\ y 

XI (y fresh) XE . 



x : XA y : A 

The logic that we capture in this extended system, which we call N{K mtl), is not LTL yet. We are able to express the 
existence of an immediate successor, but we miss a way to say that between any two points (related by -<) there can be only a 
finite sequence of points related one to each other by the relation next. We would need to express the finite interval property, 
but this is a second-order property, as observed above. 

In ||T2l . a subset of LTL called Small Temporal Logic, or STL for short, is introduced and given a natural deduction system. 
The reasons behind the definition of STL are the difficulties arising from dealing with the induction principle (relating < 
and <) that is needed in order to represent LTL. While the semantics of LTL can be given by considering Rripke structures 
defined over a relation of successor (denoted by N) and by defining -< as the least transitive closure of N, in the semantics 
of STL the relation -< is just required to contain N. It follows that a rule for induction is not needed in a system for STL. 

It is easy to verify that N{Kmtl) is complete with respect to the semantics of STL. Moreover, it can be proven to 
correspond to a logic "larger" than STL for which the condition of linearity (or connectedness) on the relation -< holds: 
we call this logic Medium Temporal Logic MTL@ We could also introduce rules for the operators since and until, but they 
would be quite complex and problematic from a proof-theoretical point of view; see [2i| for a labeled tableaux system for a 
distributed temporal logic that comprises full LTL, and [5 1 for tableaux-like ND rules for LTL. 

LTL Several systems of labeled natural deduction for LTL, e.g. |H][5][l2], introduce an induction rule like the following 

[x < x'][x' < x"][x' : A] 

x : A x < y x" : A 

; ind 

V ■ A 

which does not operate at a purely relational level. Some remarks are worth about a solution like this. First of all, the rule ind 
adds some more points of contact between the labeled and the relational sub-systems and leads to a failure of normalization. 
Moreover, one can show that the axiom of connectedness is not needed anymore since it is in a way "contained" in the 
induction principle. In fact, the axiom (3) 

~ G(GA DB)D G{GB d A) 

of weak connectedness must obviously hold in LTL, for it can be subsumed by the induction axiom (see, e.g., (9)). Thus, in 
the case we want to use a rule like ind to capture LTL, it seems more reasonable to follow a different approach that avoids 



7 The fact that every time point has one (and only one) immediate successor follows from right-discreteness, right-seriality, and connectedness, and it 
allows one to express rules for X both in a universal and in an existential formulation. We give here the universal one. 

8 An axiomatization of MTL can be obtained, as shown in 1101 . by adding the following axioms to those given for future-time Kl: 

(Kx) X(A D B) D {XA D XB) 

(FUNC) (X ~AD~ XA) A(~XiDX~A) 

(RECq) (GAdX(AaGA))a(X(AaGA)dCA) 
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both the extension of the relational language to a first-order language and the introduction of the universal falsum. In other 
words, we could have a system for LTL which uses only Horn rules in the relational theory (from which it follows that we 
have only atomic rwffs and no relational falsum) but extends the labeled sub-systems with a rule for induction that mixes 
labeled and relational premises. 

7 Conclusions 

We have already discussed some works that are related to the labeled ND systems for tense logics that we have given here 
(for which, summarizing, we have proved not only soundness and completeness, but also a number of useful proof-theoretical 
properties, and for which we also discussed extensions leading up to LTL). As we observed, the main difficulties in applying 
the labeled deduction framework in the context of linear temporal logics arise from the need of expressing the condition of 
connectedness in the case of the basic linear tense logic Kl (see ifTTI for a discussion) and the induction principle in the 
case of LTL. In fact, [11] gives a fairly complex labeled tableaux system for the logic Kl (called there the linear temporal 
logic KtA.3), which is analytical in that it only comprises elimination rules for temporal operators and can be used as a 
decision procedure. In contrast, the main distinctive feature of our approach is the extension of a fixed base system for the 
temporal operators with relational rules that express the relational properties of the considered logic. This, in particular, 
allows for uniform and modular proofs of meta-theoretic properties for families of logics, like the proofs we have given here. 
Moreover, it makes our systems amenable to extensions to other logics as we have begun investigating towards LTL and 
to the branching-time logics CTL and CTL* . To that end, we plan to capitalize on the labeled ND systems for LTL given 
in fl4j[T2], which both make use of a specific rule for induction. 
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A Proofs 



In this appendix we give the full proofs of the lemmas and theorems given in the body of the paper. In Sections I A. 1 1 
and lA.2l we give the proofs for the soundness and completeness of the system N(Kl) (Theorem^ and for the completeness 
of the extensions of Af(Kl) (Section|5J. In Section |A~3l we give proofs for the normalization results presented in Section|4] 

A.l Soundness 

Theorem 17 N{Kl) = N{Kl L ) + N{Kl R ) + N{Kl G ) is sound, i.e. it holds: 

(i) r, A h p implies T, A ^= M < X p far every model yVf and every interpretation A; 

(ii) r, A h x : A implies T, A ^= M - X x : A for every model M and every interpretation A. 
Proof 

(i) The proof is by induction on the structure of the derivation of p. The base case is when p G A and is trivial. There 
is one step case for every axiom or rule. The axioms conn, trans <, and irrefl < directly refer to the properties of 
connectedness, transitivity, and irreflexivity of Kl models (Definition [3]l and thus are trivially sound, while refl = and 
mon preserve soundness by definition of ^ M ' A x — y (Definition 3J. 

Consider the case of an application of RAA® 

r A [PD0] 1 

7T 



RAA\ 

P 

where Ai = A U {p □ 0}. By the induction hypothesis, T, Ai \= M - X for every model A4 and every interpretation A. 
Let us consider an arbitrary model M and an arbitrary interpretation A; we assume \= M ' X (r, A) and prove 1=-^^ p. 
Since J^- M > A 0, from the induction hypothesis we obtain j^ M ' X (r, Ai), that, given the assumption \= M ' X (r, A), leads 
to P M > X p □ 0, i.e. h M,A P and J^ A by Definitiong] 

The cases for □ I, Z\E, MI and \/E follow by simple adaptations of the standard proofs for classical logic. 
Finally, consider the case of an application of ufl 

r a 

7T 

x:± 

ufl 



for a proof context (T, A) and some label x. By the induction hypothesis, we have T, A \= M x x :_L for every A4 and 
every A. Given a generic model AI and a generic interpretation A, we can write ¥ M X x :_L; it follows that ¥ M ' X (T, A) 
and then also T, A ^ M ' X by Definitiong] 

(ii) As in (i), by induction on the structure of the derivation of x : A. The base case is trivial and there is a step case for 
every rule of the labeled system. The cases of introduction and elimination of connectives and that of universal falsum 
are as in (i). 

Consider an application of the rule GI 

r A [xKy] 1 



where V, Ai h y : A with y fresh and with Ai = A U {x < y}. By the induction hypothesis, for every model M and 
every interpretation A it holds V, A ^= M > X y ; A. We let A be any interpretation such that \= M ,A (T, A) and show that 
^A4,a x . j^et w be any world such that X(x) -< w. Since A can be trivially extended to another interpretation (still 
called A for simplicity) by setting X(y) — w, the induction hypothesis yields ^= M > X y ; A, and thus \= M ' X x : GA. 
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Finally, consider an application of the rule GE 

Ti Ai r 2 A 2 

"1 7T2 

x:GA x<y 

GE. 

y.A 

Let M. be an arbitrary model and A an arbitrary interpretation. If we assume \= M > X (T 1 u T2, Ai U A2), then from the 
induction hypotheses we obtain ^= M >* x : GA and \= M < X x < y, and thus \= M < X y : A by Definition^ 

The treatment of HI and Hi? is analogous. 

H 



A. 2 Completeness 



In the following, in order to simplify the derivations, we will use some derived rules. We show here, as an example, how 
to derive the rules FI and FE (see Figure O from the rules for introduction/elimination of G. We remind that the following 
equivalence holds: FA = ~ G ~ A = (G(A DJL)) DJL. 
The rule 



can be derived as follows 



while an application of FE 



y.A 



x<y 



[cG(ADl)] 1 



x:FA 

x<y 



FI 



GE 



y.A 



DE 



y- 



RAA± 



:G(4Dl)Dl 



DI 1 



[y.A] [x<y] 
7T 



:FA 



FE 



can be replaced by the following derivation 



[z:BD±] 1 



[y.A] 3 [x<y] 2 
7T 

z:B 



DE 



y.ADl. 
i:G(A3l) 



RAA± 



GJ 



A.2.1 Completeness by canonical model construction 

In the following, slightly abusing notation, we will write ip e (T, A) whenever ip £ T or ip € A, and write a; G (T, A) 
whenever the label a; occurs in some 6 (T, A). 

Definition 18 A proof context (T, A) /s Af(Kl) -consistent iffT,A Y- x :L for every x, and it is N(Kl) -inconsistent 
of/iervrae. 

Note that we can have inconsistency also by deriving in the relational system; given the rules ufl and uf2 for universal 
falsum, also this case is captured by the previous definition. 

For simplicity, in the following we will omit the "M(Kl)" and simply speak of consistent and inconsistent proof contexts. 
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Proposition 19 Let (T, A) be a consistent proof context. Then: 

(i) for every x and every A, either (T U {x : ^4}, A) is consistent or (T U {x : ~ ^4}, A) is consistent; 

(ii) for every relational formula p , either (T, A U {p}) is consistent or (T, A U {^p}) is consistent. 
Proof 

(i) Suppose that both (ru{i: A}, A) and (ru{i> A}, A) are inconsistent. Then from r U {x : A}, A h x :_L, by 
applying the rule Dl, we get r, A h i : ~ A Similarly, from ru{i:~ A}, Ahi :_L, by applying the rule RAA±, 
we get T, A h x : A. 

But, if both x : A and x : ~ A are derivable in the proof context (r, A), then it also holds r, A h x :_L, by ~ E. It 
follows that the original proof context (r, A) had to be inconsistent (contradiction). 

(ii) The proof for the relational case is analogous and is obtained by using the corresponding relational rules i.e. □ /, RAA$ 
and —iE. 

H 

Definition 20 A proof context (T, A) is maximally consistent iff the following three conditions hold: 

1. (r, A) is consistent, 

2. for every relational formula p, either p £ A or ->p £ A, 

3. for every x and every A, either x : A £ T or x : ^ A £ T. 
Completeness follows by a Henkin-style proof, where a canonical model 

M c = (W C ,^ C ,V C ) 

is built from a proof context (T, A) to show that (T, A) V tp implies T, A ^ c ^ for every formula ip. 

In standard proofs for unlabeled modal, temporal, and for other non-classical logics, the set W c is obtained by progres- 
sively building maximally consistent sets of formulas, where consistency is locally checked within each set. In our case, 
given the presence of lwffs and rwffs, we modify the Lindenbaum lemma to extend (T, A) to one single maximally consis- 
tent context (r*, A*), where consistency is "globally" checked also against the additional assumptions in A@ The elements 
of W are then built by partitioning V* and A* with respect to the labels, and the relation -< c between the worlds is defined 
by exploiting the information in A*. 

In the Lindenbaum lemma for predicate logic, a maximally consistent and cj-complete set of formulas is inductively built 
by adding for every formula ~ Var. A a witness to its truth, namely a formula ~ A[c/x] for some new individual constant 
c. This ensures that the resulting set is a>complete, i.e. that if, for every closed term t, A[t/x] is contained in the set, then 
so is Mx. A. A similar procedure applies here not only for rwffs ~Nx, p, but also in the case of lwffs of the form x : ~ GA. 
That is, together with x : ~ GA we consistently add y : ~ A and x < y for some new y, which acts as a witness world to 
the truth of x : ~ GA. This ensures that the maximally consistent context (V* , A*) is such that if x < z £ (T* , A*) implies 
z : B £ (T*, A*) for every z, then x : GB £ (T* , A*), as shown in Lemmal22lbelow. Note that in the standard completeness 
proof for unlabeled modal logics, for instance, one instead considers a canonical model A4 C and shows that if Wi £ W 
and A4 C , Wi 1= ~ GA, then W c also contains a world W2 accessible from Wi that serves as a witness world to the truth of 
~ GA atWi,i.e. M c ,W 2 N~A 

Lemma 21 Every consistent proof context (T, A) can be extended to a maximally consistent proof context (T* , A*). 

Proof We first extend the language of Af(Kl) with infinitely many new constants for witness terms and for witness worlds. 
Let t range over the original terms, s range over the new constants for witness terms, and r range over both; further, let w 
range over labels, v range over the new constants for witness worlds, and u range over both. All these may be subscripted. 
Let tpi, ip2, ■■■ be an enumeration of all lwffs and rwffs in the extended language; when ip t is u : A, we write ~ ipi for 
u :~ A. 

We iteratively build a sequence of consistent proof contexts by defining (To, Ao) = (T, A) and (I\ + i, A; + i) to be: 

9 We consider only consistent proof contexts. If (T, A) is inconsistent, then r, A h ip for all ip, and thus completeness immediately holds for all lwffs 
and rwffs. 
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• (Tj, Aj), if (Tj U {ifii+i}, Aj) is inconsistent; else 

• (T; U {u : ~ GA, d : ~ A}, Aj U {u < u}) for a t> not occurring in (Tj U {u : ~ GA}, Ai) if v?i+i is it : ~ GA; else 

• (Tj U {u : — HA, v : ~ A}, Aj U < u}) for a u not occurring in (r, U {u : ~ HA}, A,-) if (pj + i is u : — HA; else 

• (Tj, Ai U {-iVx. p, -ip[s/x]}) for an s not occurring in (Ti, Ai U {^\/x. p}) if <Pi+i is ~ Mx. p; else 

• (Ti U {</? i+ i}, Aj) if tp i+1 is an lwff or (Tj, A t U {<p l+ i}) if (p l+ i is an rwff. 
Now define 

(r*,A*) = (Ur,,|jA,). 

i>0 i>Q 

We show that the proof context (r*, A*) is maximally consistent, i.e. it verifies the three conditions of Definition l20l 

(i) First we prove that our construction preserves consistency by showing that every (Ti,Ai) is consistent. The only 
interesting cases are when <fn+\ is one of ~ GA, ~ HA, or -Nx. p. We only consider the first case, since the second 
one is symmetrical, and the third is very similar. 

If (Ti U {u : ~ GA}, Ai) is consistent, then so is (Tj U {u : ~ GA, v : ~ A}) for a v not occurring in (Tj U {u : ~ 
GA}, A^. By contraposition, suppose that 

Ti U {u : ~ GA, u : - A} , A, ; U {u < v} h Uj :_L 

by a derivation it (where v does not occur in (Tj U {u : ~ GA}, Aj)). Then in Af(Kl) we can have a derivation like the 
following: 

Ai m:~G,4 [v.^A] 1 [u<v] 2 

IT 

uj :_L 

G/ 2 

u:Gj4 ~GA 
~B 

This shows that (Ti U {ii : ~ GA}, Aj) is inconsistent, which is not the case. 

(ii) Consider an rwff p. Suppose that both p ^ A* and -ip ^ A* hold. Let p be <Pi+i for some i in our enumeration of 
formulas and ->p be fj+i- Now suppose i < j (the other case is symmetric), p £ A* implies that (Ti, Ai U {<P;+i}) 
is inconsistent. Given that in our inductive construction we only add formulas to the proof context, i.e. Aj C Aj, we 
have that (Tj, Aj U {<pj+i}) is also inconsistent. Then, by PropositionQj^n), (Tj, Aj U {<Pj+i}) has to be consistent 
and (pj+i is added by definition to Aj. This implies <Pj+i G A*, i.e. ->p G A*. 

(iii) The proof for labeled formulas is the same as in the previous case and proceeds by contraposition by using Proposition 

I .em ma 22 Let (T, A) be a maximally consistent proof context. Then: 

(i) T,A\-ipiffipe(T, A); 

(ii) pi □ P2 G A iff pi <E A implies pi G A; 
(iw) Vx. p G A iff p\yjx\ G A for all y; 

(iv) u : Ad B G T //fit : A G T implies u : B eT; 

(v) u\ : GA G r /jffiti < 1*2 G A implies U2 : A G T for all v,2,' 

(vi) u\ : HA G r ij^M2 < ui G A implies ui : A G T for all ui- 

Proof We treat only some cases, the others are similar and follow by maximality and consistency of (T, A). 
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(i) The proof is analogous for rwffs and lwffs, we see the first case. 
(<=) If <p E (r, A), then trivially r, A h (p. 

(=^) Consider an rwff ip such that tp £ (T, A). Then, by Definitionl20l -up G (T, A). It follows trivially that T, A I k/j 

holds. By hypothesis, T, A h </? and thus by using -^E we get T, A h 0, that contradicts the consistency of (T, A). 

(u) (<=) Suppose ui : GA ^ T and U2 : A € V for every «2 such that u\ < u 2 G A. Then, by maximality of (T, A), 
ui : ~ GA G r. Now suppose there exists a M3 such that u\ < 113 G A and U3 : ~ 4 e T. Then, by hypothesis, we 
know 143 : A E T and this leads to a contradiction. Otherwise, if such a M3 does not exist, we can conclude u\ : GA € T 
that leads to a contradiction as well. 

(=>■) We show it by contraposition. Suppose U\ : GA e T, «i < m 2 6 A and u 2 : A ^ T. By maximality of (T, A), 
we have w 2 : ~ A G T. Then the following is an N(Kl) proof that shows (T, A) is inconsistent. 

u\:QA ui<U2 
G-E 

U2'.A U2'. ~A 

~B 



Our construction of maximally consistent proof contexts (Lemmal2TT> does not exclude the presence of two labels x and 
y that are related by the relation x — y. Now we want to derive a model from such a construction. Since we know from 
Definition 2] that \= M <* x = y holds only if X(x) = X(y), we need to state an equivalence relation between labels on which 
the function A can be defined. 

Definition 23 Let C = (T, A) be a maximally consistent proof context and L the set of labels occurring in it, we define 
the binary relation = c on L c as follows: for every u±,U2 G L , 

m = c u 2 iff ui = u 2 G A. 

Proposition 24 Given a maximally consistent proof context C, the relation = c is an equivalence relation. 

Proof It follows trivially by the maximality of C and by the rules refl =, mon, irrefl < and conn. H 

Notation 25 It follows from Proposition\24\that every maximally consistent proof context C determines a partition of the set 
L of labels occurring in it. In the following, we will also use the notation [u] c to indicate the equivalence class containing 
the label u, i.e. 

[uf = {«' I u = c u'}. 

Definition 26 Let C = (T, A) be a maximally consistent proof context and L c be the set of labels occurring in it. We define 
the canonical model M c = {W c , < c , V c ) as follows: 

• W c = {[u} c I u G L c }; 

• {{a,) , [ Uj \ c ) G < c iff Ui < Uj G A; 

. v c ([u] c , P ) = i iff u: per. 

We define the canonical interpretation X c : L c —* W c as follows: 

\ c {u) = [u] c for every u G L c '. 

Remark 27 Note that in the previous definition -< c and V c are well defined, since it is easy to verify that for every Ui,u 2 G 
L c it holds: 

• ui = c u 2 implies for every U3 G L c , Ui < U3 G A iff u 2 < U3 G A; 

• ui = c u 2 implies for every U3 G L , U3 < m G A iffu^ < u 2 G A; 

• Ui = u 2 implies for every p G V, ui : p G T iffu 2 : p G T. 
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[x<y] 2 ^{x<y) [x=y] 2 -*(x=y) 

conn -^E E 

Vx.y. x<yUx=yUy<x [x<ylJx—y] [yKx] 1 ^(y<a 
■ VE UE 2 



x<yUx— yUy<x 

UB 1 



Figure 8. Proof for connectedness of canonical models 

Proposition 28 Given a maximally consistent proof context C = (T, A), the canonical model A4 C is a Kripke model for 
Kl. 

Proof It suffices to show that Ai is irreflexive, transitive and connected. 

Suppose there exist three worlds Wi,W 2 , and W 3 in W c such that (Wi,W 2 ) G^ c and (VV 2 , W 3 ) G^ c , but (Wi, W 3 ) <^ c . 
By definition l26l this implies there exist at least three labels x, y and z such that \(x) — Wi, A(y) = W2, A(z) = W3, 
x < y G A and y < 2 G A, but x < z ^ A, i.e. by the maximality of C, ->(x < z) G A. But this leads to the inconsistency 
of (r, A), as shown by the following derivation. 

trans< 

Mx.y.z. (x<yF\y<z)Zlx<z x< y<z 

= VB HI 

{x<yriy<z)^lx<z x<yV\y<z 

Z2E 

x<z -i(x<z) 

<E 



Connectedness of M. c can be proved in a similar way by using the rule conn. Suppose there exist two distinct worlds 
Wi and W 2 in W c such that (Wi, W 2 ) £< c and (W 2 , Wi) £< c . By definition [26] this implies there exist at least two 
labels x and y such that X(x) — Wi, A(y) = W 2 , x — y ^ A, x < y ^ A and y < x ^ A, i.e. by the maximality of C, 
->(a; = y) G A, < y) G A and -i(y < x) G A. But this leads to the inconsistency of (T, A), as shown by the derivation 
in Figure [8] 

Irreflexivity of Ai c can be shown in a similar way. H 

Lemma 29 Let C = (T, A) be a maximally consistent proof context, Ai c the canonical model and A the canonical 
interpretation built on C as in Definition \26\ Then: 

(i) p G A iff I .A: V! ' A ' ft: 

(ii) u : A G r iff r, A \=^ c ,\ c u . A 
Proof 

(i) (=>) By hypothesis, p G A. Then, if we assume \= M ° ' A ° (r, A), it immediately follows \= M<Z ' > x p. 

O) By hypothesis, T, A \= M - A p. Let us suppose p A. By maximality of (r, A), it follows G A. Then we 
have also T, A \= M x ^p (see direction (=>)). But, since we have by hypothesis F, A \= M ' A p, this yields the 
absurd T, A \= M ° 0. 

(ii) The proof for labeled formulas is analogous. 

H 

Theorem 30 Af(Kl) = M{Kl L ) + N(Kl R ) + M{Kl G ) is complete, i.e. it holds: 

(i) ifT, AF w : A , then there exist a Kl model Ai c and an interpretation \ c such that T, A Y mC ,a w : A; 

(ii) ifT. AV p , then there exist a Kl model Ai c and an interpretation \ c such that T, A Y- M ' A ° p. 
Proof 
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[t-.GA] 1 



tran&C 

Vx.y.z. (x<yUy<z)Zix<z 

VB 

Vy.z. (t<yny<z)Zlt<z 

VB 

Vz. (t<sHs<z)Zlt<z [t<s] 2 [s<r] 3 

(£<sns<r)Z]i<r t<s n s<r 

□£? 

i<r 

GB 



nJ 



r:A 

TT G/ 3 

' G/" 

t:GGA , 
Dl 



i:GADGGA 



Figure 9. Derivation of the axiom (G3) 



(i) If r, A Y- w : A, then (ru{w : ~ A}, A) is consistent; otherwise there exists a Wi such that r U {w : ~ A}, A h wi :_L, 
and then r,A h id : A. Therefore, by Lemma |2T1 (T U {w : ~ A}, A) is included in a maximally consistent proof 
context C = ((T U {w : ~ A})*, A*). Let M. be the canonical model for C. It suffices to find an interpretation 
according to which M. c is not a model for w : A By Lemma |29l (ru{iu :~ ^4})*, A* \= M ' X w :^ A, where 
M c is a ffi model by Propositionl28l It follows ru{m> A})*, A* ¥ M ° ' X ° w : A, and thus T, A ¥ M ° w : A. 

(ii) We can repeat the same proof for relational formulas. If V, A V p, then (r, A U {^p}) is consistent. Then we can build 
a maximally consistent proof context T*, (Au{-.p})* such that T*, (Au{^})* ^M c \x c ^ an( j thus T, A \£ M ° ^ c p . 

H 



A.2.2 Completeness by axioms 

It is possible to give an indirect proof of completeness by showing that all the axioms listed in Section 1231 for the logic Kl 
are derivable in Af(Kl). In the following derivations, for simplicity, we will sometimes use derived operators and derived 
rules, and exploit trivial equivalences between formulas implicitly. 
We begin by giving derivations for the axioms (Gl) and (G2): 



[f.G(ADB)] 1 



[t<s] 3 



[t:GA] 2 



[t<s} : 



t:GADGB 
t:G(ADB)D(GADGB) 



[s:GA] 2 [s<t] 2 

, GE 

[t:PGA] t:A 

— A ; — pe2 

Dl 

t-.PGADA 

The derivation for (G3) is shown in Figure|9l while the derivation for (G4) is in FigureQX)] We omit here the derivations for 
the symmetric axioms (H1)-(H4). 

Completeness of the extended systems considered in Section[5]can be also proved by deriving the corresponding axioms. 
In Section [5] we have already proved the axioms for having a first point and right-seriality. We show the derivations for 
right-density and for right-discreteness in Figure[TT]and Figure[T2] respectively. Derivations of the other axioms (final point, 
left-seriality, left-density, left-discreteness) are symmetric and we thus omit them. 



A. 3 Normalization 



Proof [Lemma|7] 

(i) We show that any application of RAA±, RAA^, and mon with a non-atomic conclusion can be replaced with a derivation 
in which such rules are applied only to formulas of smaller grade by the set of transformations given below. By iterating 
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\/x.y.x<yUx — yUy<x o 

Vy. s<i/Us^Ui/<s VS [s = rUr<s] 5 

V.E 



s<rUs=rUr<s 



u/2 



[i:F~AAF~B]^ t:F ^ s "~ t: j_ 
- AE FE 



t:_L 
FE° 



t:GAvGB 



t:(G(AVB)AG(AvGB)AG(GAVB))D(GAvGB) 



D/ 1 



where 7ri is: 

[£:(G(AVB) AG (AvGB)AG(G AVB))] 1 



AE 



t:G(AVGB) [t<s] 3 [s:~A] 3 [s:A] 7 [s: ~GB] 6 [s:GB] 7 

G-B ~E ~E 



(s:AvGB) 



s:_L « 

s:GB [s<r] 5 

GB 



[r:~B] 4 r:B 
~E 

u/1 



7T2 is: 

[£:(G(AVB) AG (AvGB)AG(G AVB))] 1 

AB 

t:G(AVB) [t<s] 3 [ S: ~A] 3 [s:A] 12 [s^B] 11 [s:B] 12 

GB ~B ~B 

s:AVB s:X s:X 

VB 12 



[r:~B] 4 r:B 
~E 

v-J 1 



and its is: 

[£:(G(AVB) AG( AvGB) AG(GAVB))] 1 



■ AE 



£:G(GAVB) [i<r] 4 [r: ~GA] 9 [r:GA] 10 [r: ~B] 4 [r : B] 10 

GB ~B ~E 



:GAVB 



r:± „ 

r:GA ~ [r<s] 8 

GB 



[s:~A] 3 s:A 
~B 

S:± ■ ufl 





Figure 10. Derivation of the axiom (G4) 



Vx.y. a:<yZl3z. (:r<znz<y) 



Vj/.(t<yZl3z. (t< 



:»)) 



■ dens 

■ V£ 



t<sZl3z. (t<znz<s) 



VE 



3z. (t<znz<s) 



t:FFA 



D/ 1 



[t: ~FFA] 3 



[*<*] : 



t:± 



tiFFA 



u/2 
RAAi 3 



■ FB 



[t<rnr<s] 4 



s:.4] 2 



r:FA 



t:± 



ufl 



■ 3£ 4 



F/ 



[t<rl~lr<s] 4 



i:FFA 



t:FADFFyl 

Figure 11. Derivation of the modal axiom for right-density 



t<r 



HE 



FI 
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Vx.y. x<yZi(3z. x<zn(^3u. x<utlu<z)) 



W 


uf2 

r .j_ 

— ■ RAA , 6 

r -A [i<sn(Vu. ^(t<u)U-.(u<s))] 4 
— HI 5 



VE „ -^11 FJ 



Vy. t<yu(3z. t<zn(Vu. -.(t< M )U-.(n<z))) ^ [t : ~FHA] 2 £:FHA 



t<83(3z. t<zn(Vu. -.(«u)U-.(u<z))) [t<u] d t : _L 

□ E ufl 



[tiFTAAAHA] 1 3z.i<zn(Vu.^(t<ti)U-.(u<z)) 

AE ; 3E 4 

i:FT 





u/2 

t:± , 

t:FHA 

D/ 1 



FE 3 



i:(FTAAAHA)DFHA 



where 7r is: 

[£:FTA AAHA] 1 



AE 



t-MA [r<t]' 

HE 



conn 6 - 

Vx .y . x <Cy Ux — yYJy <Cx [r:^A\ r:A 

■ ME ; ~E 



Vy. r<yUr=yUy<r r:± 7T1 
ME u ' 1 



r<tUr=tUt<r 



and 7Ti is: 

[£:FTA AAHA] 1 



AE 



t:A [r = i] 8 [t< S n(V tl .^(t< t .)U^(«<s))] 4 

■ mon — ; : ; nE 



[r:~A] 6 v.A V».n(Ka)U^(t.<s) "" h(t<r)] [i<r] s h(r<s)] 9 [r<sf 

r^E VE iE iE 

^(t<r)U^(r<s) 



ufl 





UE 8 



UE J 



Figure 12. Derivation of the modal axiom for right-discreteness 
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these transformations, we get a derivation of tp from T, A where the conclusions of applications of RAA±, RAA$, and mon 
are atomic. 

(1) First, we consider applications of RAA±. There are three possible cases, depending on whether the conclusion is 
x : B D C, x : GB, or x : HB. Note that in the following transformations we only show the part of the derivation where the 
reduction, denoted by actually takes place; the missing parts remain unchanged. 



( Case 1 ) 



[x-.BDC] 1 [x:B] 3 

[i:C3l] 2 x:C 

DE 



:(BDC)D±] x:1 _ 

Dl 



RAA, 



x-.BDC y.± 

RAAj 

x:C 

Dl 3 



x-.BDC 



(Case 2) 



[y.BD±] 2 y.B 

[x:GBD±] J±L RAA± 

1 1 Dl 1 



[x-.GB] 1 [x<y] 3 

- GE 



DE 



y:± 
RAA A 



x:GB 



x:GBD± 

7T 

y.± 

RAA ± 

y.B 

GI 3 



x-.GB 

Case 3 concerns formulas of the form y : HA; it is analogous to the previous one and we omit the reduction for it. 

(2) Applications of RAA$ can be reduced to applications on formulas of lower grade, following an approach analogous 
to that of RAA±. It is easy to see that in this case, we can also restrict to applications of RAA^ in which the conclusion is 
not 0. We have to consider two possibilities: formulas of the form pi □ p 2 and formulas of the form Vx. p. We consider only 
the second case, since the first one is analogous to the case of implication for labeled formulas: 

v/ 





RAA® RAAl 



Vx. p p 

V/ 

Vx. p 

(3) Finally, we consider applications of the rule mon. We have five cases depending on the form of the formula that is the 
major premise of the mon application: 

(a) x : A D B 

(b) x : GA 

(c) x : HA 

(d) pi □ p 2 

(e) Vx. p 
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7T 71"! 7T TV i 

xTZy x=z 7T 2 xV -y x=z 7T3 



mon 



zKy y=u ftr, zlZy z=v 7T 2 
mon mon 



zlZu z=v vTZy y=u 



vIZu vTZu 

Figure 13. Rule permutation for the ordering of mon applications 

( Case a ) 

[y.A] 1 x=y 

mon 

x:ADB x:A 
x:ADB x=y DE 



mon ~~» x:B x—y 

y.AzyB mon 

y.B 



y.ADB 

[j/<z] 1 x=y 

mon ^ Z qe 

y:GA z:A 

GI 



DI 1 



( Case b) 



x:GA x=y x .qa 



( Case e) 



y.GA 
Vx. p 



■ VB 



Mx.p y=z P V=z 

mon 



Vx.plz/y] P[z/y] 

Vx. p[z/y] 

The case (c) is analogous to (6), while the transformation for the case (d) is as in (a) where □ plays the role of D. 

(ii) We show that every application of mon on a lwff of the form x :_L can be replaced by an application of RAA± that 
does not discharge any assumption: 

7T „' TT 

x:X x=y ^ x:± 
mon ru±si± 



y.-L V-L 

H 

Proof [Lemma |9) We follow the procedure based on proper reductions used in flT9l and we only treat the cases dIJdE, 
GIIQE and VINE. The transformations for the detours □ //□ E and H//H7 can be easily inferred from these. Any formula 
ip in a derivation is the root of a tree of rule applications leading back to assumptions. We call side formulas of <p the formulas 
in this tree other than cp. In order to eliminate maximal formulas from a derivation, it suffices to apply the transformations 
listed below, picking in the set of maximal formulas the formula with the highest grade that has only maximal formulas of 
lower grade as side formulas, and iterating this process until there are no more maximal formulas in the proof. The process 
ends because at every step no new maximal formula as large as (or larger than) the eliminated one is introduced. 



[x:A] 
7Tl 



7T2 

c:A 



(i) x:B T 2 

DE x:B 



x:ADB x:A 



x:B 



[x<y] 

„■ X<Z 

(ii) y.A ^> f[a/v] 

v ' GI 

x:GA x<z z:A 
GE 
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/■•■\ p Ay I A 

\ / Va; . p r / 1 

— vb p ty/ x > 

p[y/x] 

Finally, in Fig.[l3]we show how to permute applications of rules in order to get a derivation where, given a sequence of mon 
applications, the ones on the same label position occur one immediately below the other. We denote with 1Z a relational 
symbol that can stay both for < and for =. In the derivation on the left, the first and the third application of mon refer to the 
same label position and thus are moved one immediately below the other. The derivations obtained in this way will then be 
further simplified during the normalization process. H 

Proof [Theorem QT) First, we observe that by Lemma [9] we can obtain a derivation in pre-normal form. Now let us show 
how to remove redundant formulas. We know from Lemma [7] that every application of a falsum-rule has an atomic formula 
as a conclusion. Thus it is sufficient to consider the following transformations: 



FA 



x:± 



RAA ± 



r A 



x:± 



i/:_L RAA A 

RAA ± z:A 



where A is ± or an atomic formula. Note that if the formula z : A D_L is contained in T and discharged by the second 
application of RAA± in the derivation on the left, then the same can be done in the derivation on the right. 



(ii) 



x:± 

y:± ufl 

ufl 



(Hi) —-n ^ j^ RAAl 

u/2 y:X 



(iv) — — u f 2 <W . 

ufl 



For the rule mon, given the ordering of mon applications obtained by permutations defined in Lemma|9] the only case we 
have to treat is when two applications of mon working on the same label position of a formula occur consecutively. Then 
we simply exploit the transitivity of = (obtained by using mon). Note that, by Lemma|7] in the following reduction ip is an 
atomic formula. 

<P x —y 7r 3 TTi x— y y—z 

mon 



v[y/ x ] y= z v 



tp[z/x] <p[z/x] 

H 

Proof [Lemma [T3l (i) and (ii) follow from the absence of maximal formulas in a normal derivation: in a track t, no 
introduction rule application can precede an application of an elimination rule. In other words, a track in a normal derivation 
is such that the elimination part (when not empty) starts with a non-atomic formula and consists of some applications of 
elimination-rules; if the elimination part ends with an atomic formula, then the central part (when not empty) consists of 
some applications of rules whose conclusion is still an atomic formula; the introduction part (when not empty) starts with an 
atomic formula and consists of some applications of introduction rules (see Fig|4|i. 
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(iii) comes from the fact that in a normal derivation a falsum-rule and the mon-rule can be applied only to atomic formulas. 

(iv) follows directly from the absence of redundant formulas in a normal derivation (see TheoremfTTI). 

For (v) and (vi), observe that tracks originating from an application of ufl or it/ 2 start with an atomic formula and thus 
cannot have an elimination part, while tracks ending in an application of ufl or it/ 2 end with an atomic formula and thus 
their introduction part must be empty. H 
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